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® Transaction approval system. 



<g) An improved system Is disclosed for detecting invalid transaction cards at remote transaction terminals. The 
system includes providing each terminal with a master table having data corresponding to invalid cards. The 
data in the master table is less than the actual account numbers of the invalid cards. By using a compressed 
version of the data, the file can be shortened to facilitate storage and transmission. The compressed data file is 
arranged such that when an invalid card is presented, it will be identified and routed on for further processing. In 
the preferred embodiment, the probability that a valid card will be identified as potentially invalid Is on the order 
of one to three percent. During each transaction, the master table is supplemented with information about the 
account number of the transaction card presented for the purchase. In this manner, any subsequent use of the 
card will be routed for additional processing. A scheme for compensating for data transmission errors is used to 
reduce the possibility that information about invalid cards Is not lost when the master file is distributed 



CM 
< 




Pi 




lERMINAL 


eo 


MASTER TABLEyRECHVER 




09 


TERMIMAL 




MASTER TABLe]rECEA/ER 


Q. 


V-40 ^70 


UJ 


TERMINAL 




MASTER TABUe[rECEIVER 




^40 ^70 




FIG. 1 



Xerox Copy Centre 



EP 0 378 349 A2 



TRANSACTION APPROVAL SYSTEM 



\The subject invention relates to a financial transaction network. The Invention includesi^|n|Lcnprpvrecl| 
g^sterffSJrS 

In the last fifteen years the use of transaction cards as substitutes for cash has greatly expanded. Along 
with this expanded use has come an increase in losses due to fraud. One of the most costly problems is 
5 caused by the use of invalid cards. The ternn invalid card includes those cards which have been lost or 
stolen. The term can also include cards whose credit limits have been exceeded by the holder. Significant 
efforts have been made to minimize the use and abuse of invalid cards. 

One of the earliest approaches used to combat this fraud was to distribute a printed list of invalid cards. 
One such list is called the Card Recovery Bulletin or CRB. In use, the merchant checks the account number 
10 on the card presented for the transaction with the account numbers printed in the CRB. If the account 
number is listed, the transaction would be declined. 

This use of the CRB is effective in reducing a large percentage of fraud losses. Unfortunately, this 
approach has a few drawbacks. For example, a transaction card is often used almost immediately after it 
has been lost or stolen. This immediate use will occur before the card has been listed in the bulletin or 
IS before the bulletin has been distributed. Another problem with this approach is that from a practical 
standpoint, it is often difficult to insure that store clerks use the list properly or at ail. 

Because of these difficulties, many other more sophisticated approaches have been taken. One of the 
most effective schemes is to authorize every transaction through a real-time, on-line communications 
network. For example, the merchant can report the account number of the card presented for a transaction 
20 to a central processor by telephone. The account number on the card can then be checked against a 
cunrent list of invalid card numbers stored either at the centra! processor or back at the card issuer. In 
another variation on this scheme, a transaction terminal is provided with a card reader which reads a 
magnetic stripe encoded with an account number. The terminal can then automatically transmit the account 
number to the central processor for approval. 
25 This on-line scheme eliminates the lag time inherent in using the Card Recovery Bulletin. Unfortunately, 
a fully on-line system turns out to be prohibitively expensive and prone to communication delays. An on-line 
approach also does not provide any protection when the network is down. 

More recently, many approaches have been taken to reduce transaction approval costs while also 
controlling fraud losses. As microprocessors become smaller, cheaper and faster, some of the transactional 
30 analysis can be performed at the terminal itself. Efforts have been made to develop screening procedures 
that avoid having to transmit the transaction information to the central processor. For example, the 
transaction terminal can be programmed to authorize every transaction below a certain dollar limit or floor 
limit In this manner, the cost of communication can be balanced against the risk of loss. 

The terminal may also be provided with the capability to verify a cardholder secret personal identifica- 
35 tion number or PIN. In this scenario, a version of the PIN Is encoded onto the magnetic stripe on the card 
and read by the terminal. The terminal then compares the PIN read from the card with a PIN entered into a 
keypad on the terminal by the cardholder. If the two PINs match, the transaction can be approved. The use 
of PINs sharply reduces the fraudulent use of lost or stolen cards. 

A more sophisticated approach is described in U.S. Patent No. 4,734,564, issued March 29, 1988, 
40 assigned to the same assignee as the subject Invention and incorporated herein by reference. In this patent 
application, a system is described wherein risk assessment data Is encoded onto the card by the card 
issuer. This risk assessment data is tailored to define the credit worthiness of each specific cardholder. This 
risk assessment data can be analyzed by the transaction terminal and if the transaction amount falls within 

the parameters encoded- on the card-by the issuer, the -transaction can be. automatically approved- lf_the_ 

45 transaction amount exceeds these parameters, the transaction information is routed on to the central 
processor for further analysis. 

As the cost of computer memory space has decreased, the idea of storing the account numbers of 
invalid cards in each transaction terminal has been explored. If this scheme were implemented, the account 
number of the card being presented for the transaction could be automatically compared at the terminal. 
so One prior art system which utilized this approach is described in U.S. Patent No. 3.696.335, issued October 
3. 1972 to Lemelson. 

The approach illustrated in the Lemelson patent has been deemed impractical for a number of reasons. 
^ More specifically, In order to keep the lists current, they would have to distributed to the terminals and 
updated on a frequent basis. With the number of transaction terminals rapidly^^expanding, It would be 
virtually impossible to physically transfer this data to the terminals on a routine basis. Therefore, distribution 
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of the list of invalid account nunnbers must be through some type of communication link. Unfortunately, the 
lists of invalid cards are so large for the major transaction card systems that on-line distribution becomes 
quite difficult. However, if some way could be developed to distribute the list in an efficient manner, this 
approach could be very effective in reducing both communication costs and fraud losses. 

5 One technique for attaining this goal is described in U.S. Patent No. 4,558.211. issued December 10, 
1985 to Berstein. This disclosure acknowledges that a complete "hot card" list would be too large to 
transmit to each transaction terminal. The solution proposed in the latter patent is to add an identifier to 
each listed hot card which indicates the geographical location in which the card is most likely to be used. 
Subsets of the hot card list geared to specific geographical locations can then be generated. The greatly 

10 shortened lists can then be distributed to the terminals and stored. The patent suggests that a standard 4K 
byte memory in a terminal could hold a list of 800 invalid cards. Since most invalid cards are used in the 
area where they were lost or stolen, this approach could be very effective as long as only 800 invalid cards 
exist in any geographical area. 

Unfortunately, major transaction card companies will typically have over one million invalid cards listed 

IS on any given day in the United States alone. Even when these lists are broken down geographically, the 
size of the smallest list does not fall much below 100,000 cards. Obviously, if the geographical area is made 
too small, the effectiveness of the system will be reduced since it will be limited to catching an 
unauthorized user only at the exact location the card was lost or stolen. 
The subject invention provides for/gSlthoaiforlgenerating 

20 flnforTnatiOTlaboutlih^^^^^ 

/^Tjoont^Jf^ size of the file, the downloading of the 

information to local transaction terminals is greatly facilitated. 

The information contained in the master file is less than the actual account numbers of the invalid 
cards. Nonetheless, the data Is so arranged that if an Invalid card is presented to a transaction terminal, it 

25 will always be Identified as requiring further analysis prior to approval. If the card is so identified, the 
account information can then be transmitted to a central processor for final confirmation against a complete 
invalid card list. Conversely, if an account number is tested against the master file at the transaction 
terminal and is cleared, the transaction can safely be approved off-line since this result insures that the 
account number is not listed in the invalid card file. 

30 Because of the characteristics of the data compression system of the subject invention, a certain 
percentage of valid cards which are presented will be identified as potentially invalid. In such cases, the 
information about the transaction will be passed on to the central processor for absolute verification. The 
probability of a valid card being identified as potentially invalid can be adjusted by varying the characteris- 
tics of the master table. The probability of a valid card being identified as potentially invalid should be less 

35 than ten percent and preferably on the order of one to three percent. Since many transactions are 
transferred to the central processor for other reasons (i.e. high dollar amount transactions which exceed the 
floor limit of the terminal), the fact that a small percentage of transactions are sent to the central processor 
under this scheme will have an insignificant Impact on overall system performance. 

aniS^ster^tabl rnapsC^As discussed in detail below, by using a plurality 

40 of bit maps in the master table instead of just one. the probability of a valid card being identified as 
potentially invalid can be reduced. Conversely, as the number of bit maps is Increased, processing time is 
also increased. 

Each of the bit maps In the table is B bits in length. Information about the invalid cards is represented 
by indicators within the bit map. In order to set the indicators, the account number of the invalid card is 

45 subjected to an algorithmic function to generate an index value between zero and the number of bits In the 
bit map. When this value is obtained, an indicator is placed in the location in the bit map corresponding to 
the index value that is generated. In the illustrated embodiment, where five bit maps are used, the account 
number is subjected to five different algorithmic procedures to generate five different index values, each of 
which is used to place an indicator in one of the five bit maps. 

50 The algorithm used to generate an index value may be relatively sophisticated, such as the data 
encryption standard (DES). For greater speed and simplicity, selected digits of the account number can be 
mixed and added to generate an index value. miilp:pces§]5f^ 
^ Gontehtjn'^a data^stfeam is typically called Vhashing^. 

'""^^he selected hashing procedures are repeated for each of the invalid cards on the list. (When- the: table 
55 -is-'comptete^ritjszdistribute^^^^^^^^ In the preferred embodiment, this list is 

^^ownioaded by broadcast transmission to all terminals simultaneously. This list can be downloaded through 
any other suitable type of communication link. 

In operation. (tbepaca?.unt,.n pres^ented for the, transaction is read into Jhe^teirnJnalr^The 
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Cterminalith'en'^erforms the^ samF algdnthmic : ste^lS^ the new account number that was^ne 

t^"^;SiteThe table in the first place. ^ingeWalueTis-geiierated.fQr^^^^ ^Theiiransartion-t^irnmajr 
rthenfdetermifSSrif3Sh.inaica6r:is*pfesenti^ 

:^;;;X;HS^^erated:ind ^ """mediately 

6 ta^wS^toS'vadtand.theitransacti^ » the comparison reveals that the indicators 

^JTS^SSS-nfriv^^ then there is a possibility that an invalid card has been presented In thrs 

case, some form of further processing will be required. At that point, the transaction may be routed to ttie 
central processor for an absolute comparison of the account numbers against the entire list of invalid cards. 
If the transaction system happens to be down, a message may be relayed to the_operatoi3atJhe a^^^^^ 
w number should be checked against a printed list. As pointed out above.aig|mn§!imidentify.some^small 
^^ntag^£f wajid;cardsjase^^^^^^^ results of further processing will indicate that those ^ 

cards'soidi^Sfied'^ein factvaTid and that the transaction should proceed. 1 

It is estimated that a master table generated with the subject data compression system will be one- 
fourth to one-sixth the length of a list of actual invalid account numbers. This shorter file can be more easdy 
15 transmitted and stored. Another advantage to this approach is that the entire table does not have to be 
scanned to determine if a card is valid. The index values are used to pinpoint specific locations in the table. 
As soon as such a location is encountered in which no indicator is present, the card in question is 
immediately known to be valid- 

As can be appreciated, the subject system provides an improved method for determining it a 
20 transaction card has been reported lost or stolen or whether the holder has exceed the assigned credit limit. 
Unfortunately, even with the subject system, cards that have been identified as invalid, may not be present 
in each master table. In operation, a card which has just been reported stolen is immediately listed by the 
card issuer and central processor. However, the card may be fraudulently used before there has been an 
opportunity to provide an update in the master table at the remote terminal. 

In order to further reduce this improper usage, the subject system may be configured to supplement 
the distributed hot card file with the account numbers of each card used at the local terminals. In operation, 
the account number of the card presented for the transaction would first be checked against the existing 
master table. If the account number is not present, the transaction could be approved for further processing_ 
At the same time, indicators representative of the account numbers of the card being used will be entered 
into the master table. By this arrangement, any subsequent use of that card at the tenninal will be iderrtified 
as possibly invalid and sent on for further on-line processing. This approach prevents the card from being 
repeatedly used and avoiding more complete, on-line verification which would detect a card that had been 
listed at the central processor or issuer since the last distribution of the master table. 

As noted above, the master table may be transmitted to the local terminals. Whenever data is 
transmitted eaors will occur. Transmission errors are more frequent when broadcast technology is used and 
the remote terminals lie in fringe reception areas. 

In the prior art. many techniques have been developed to detect and conrect data transmission errors. 
Some systems simply require redundant transmissions and comparisons. In other cases, vanous party and 
check digits are used to pinpoint transmission errors. 

Such error detecting techniques may be used to correct some of the transmission errors that would be 
encountered in distributing the master table defined in accordance with the subject invention. However, 
many of these error detection techniques do not give unambiguous information on transmission errors. For 
example, tiiey may give information as to which data bytes have errors but can not identify which bits witiiin 
the byte are in error. In such a case, correction is not possible and the data block might have to be 

45 discarded. . . . . 

In contrast, in accordance with the subject invention, where ambiguous transmission errors have been 
detected a means is provided for compensating for those errors in a manner such that information about 
" invaHd cards is not lost. As' noted abdveT invalid cards: are listed in the bit map of the master table-using - 
indicators. If it is determined that certain bits may have been improperly transmitted, they can be modified 
50 by placing indicators in those bit locations. While this approach will increase the number of valid cards 
which are identified as possibly invalid, it will also minimize the risk tiiat a card which should have been 
listed in the master table has been omitted. Thus, this approach substantially enhances the integnty of the 
transmitted file and protects against fraudulent usage of tine cards. ..^ ^ , 

Thus the present invention may provide a system for distributing infonnation about invalid cards a 
55 system for distributing lists of invalid cards which can be used to authorize transactions at a transaction 
terminal, a system for distributing lists of invalid cards in a cost effective manner, a system for rapidly 
distributing lists of invalid cards in an on-line manner, a data file containing Information about invalid cards 
that takes up very little memory space, a compressed data file that can be easily transmitted to remote 
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transaction terminals, a compressed data file which will always Indicate when an invalid card has been 
presented and wherein the probability of Identifying a valid card as a potentially invalid card is on the order 
of one to three percent, a hot card authorization system that can easily be implemented in current 
microprocessor based remote transaction terminals, a compressed data file with Information on an invalid 
5 transaction that is arranged in a manner such that the entire file does not have to be searched in order to 
detenfnine if a particular account number Is Invalid, means for detecting multiple uses of transaction cards, a 
means for supplementing the locally stored list of invalid cards with cards that have been used at that 
location, a means for compensating for errors in transmission of the list of cards and/or a means for 
compensating for ambiguous errors In the transmission of a list of invalid cards so that no information about 
10 the listed cards is lost. 

The invention will now be described in detail with reference to the accompanying drawings in which: 
Figure 1 is a schematic diagram illustrating a transaction network where the method of the subject 
invention can be implemented. 

Figure 2 is a representation of a master table having five bit maps. 
75 Figure 3 is a representation of the last 12 digits of an invalid account number. 

Rgure 4 is a flow chart illustrating the steps taken at the transaction terminal in accordance with the 
subject invention. 

Figure 5 is a flow chart, similar to Figure 4. illustrating the steps taken at the transaction terminal in 
an alternate embodiment of the subject invention. 
20 Figure 6 is a flow chart illustrating the error compensation technique in accordance with the subject 

invention. 

Referring to Figure 1, there is Illustrated a transaction network in which the subject invention may be" 
implemented. As shown in Rgure 1. a transaction network typically will include one or more issuers 10 of 
transaction cards. The transaction cards are distributed to customers and will include an account number 
25 Identifying the cardholder. The cards are presented to merchants for goods and services in lieu of cash. 

The transaction is frequently authorized through the use of transaction terminals 20. There are a large 
number of transaction terminals publicly available and therefore they will not be described in detail herein. 
The current state of the art transaction terminal typically includes a card reader for reading account 
information and other data from the magnetic stripe on the transaction card. The terminal can also be 
30 provided with the ability to automatically dial and make an on-line connection to a computer located either 
at a merchant bank, a network switch or to one of the card issuers. For the purposes of this disclosure, 
block 30, labelled "CPU," is intended to correspond to a central processing unit having higher level 
decision-making authority. For example, the central processing unit 30 can have stored therein a full list of 
invalid cards 32 which may be consulted to determine if the transaction should be approved. 
35 As discussed above, the transaction terminal 20 may be provided with the ability to perform some 
transactional analysis without connection to the main CPU 30. To carry out these functions, the terminals 
will include a microprocessor, dedicated ROMs, random access memories, a keypad and display. In order 
to perform the subject invention, some dynamic memory space must be allocated for holding the master 
table 40. In addition, a program must be provided for analyzing the account number presented with the data 
40 in the master table. The programming of a terminal to perform these functions is well within the abilities of 
one skilled In the software development art. 

In accordance with the subject invention, the terminal 20 is capable of determining whether a card, 
presented for a transaction, is likely to be invalid. This result was achieved in the above cited U.S. Patents. 
In the prior art systems, actual invalid account numbers are supplied to each transaction terminal. The 
45 account number of the card presented is compared to the account numbers listed in the memory to 
detennlne if the transaction should be approved. In contrast, in the subject invention, a master table 
containing information less than the invalid account numbers is generated and supplied to the terminals. In 
this manner, meaningful data can be stored in less space. In addition, only precise locations in the table are 
searched to determine if the card is Invalid. 
50 In accordance with the subject invention, the information on the invalid cards is contained In a master 
table 40 generated at the central processor 30. An example of a master table 40 is shown in detail in Figure 
2. The master table consists of at least one bit map of B bits in length. Preferably, a plurality of bit maps 
are used. As will be seen below, by using a plurality of bit maps In the master table instead of just one. the 
probability of a valid card being identified as potentially invalid is decreased. In the illustrated embodiment 
55 of Figure 2. five bit maps are used. 

When selecting the length of the bit map, consideration should be given to maximizing the information 
content within the map. From a statistical analysis, it can be shown that greatest information content in a bit 
map occurs when roughly half the bits are zero and half the bits are one. Assuming that the algorithmic 
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functions used to generate the table provide results with pseudo-random characteristics, the fraction of bits 
in a bit map which are zero is given by the following equation: 
(1) Z = [1 -(1/B)f 

where Z is the fraction, B is the number of bits in the map and N is the number of invalid cards listed. 
5 Where each bit map is 200.000 bits in length, a distribution profile where half the bits are zero and half the 
bits are one (Z = 0.5) would occur when about 138.000 account numbers are listed. In the illustrated 
embodiment where roughly 100,000 cards are initially listed, the probability of any bit being a one Is on the 
order of 0.4. In operation, as account numbers are added to the master table through an update procedure 
discussed below, the information content in the bit map will increase as the probability increases to 0.5. 

70 In order to generate the table, the account numbers of the invalid cards are "hashed" to derive 
compressed data. An account number can be hashed by encrypting the number using the data encryption 
standard (DES) and a secret key. The resulting number can be truncated to an index value between zero 
and B-1 . An indicator, (for example, a "one" if all the bits are originally set to "zero") can then be placed in 
the bit map at the location corresponding to the Index value which has been generated by the algorithmic 

75 function. If more than one bit map is used, the account number could be encrypted again, using a different 
key. The result is truncated to obtain another index value which will be used to place an indicator in the 
second bit map. This process would be repeated, encrypting the account number one time for each bit map 
present In the master table. Each invalid card would then have one indicator in each of the bit maps. Similar 
steps would be performed for each Invalid card, and indicators would be added into the table. If an indicator 

20 was already located at an index value from a previous card, this Indicator would remain unchanged. 

While the data encryption standard (DES) provides a method of hashing account numbers which has 
. suitable pseudo-random characteristics, it is also time-consuming and complex. In the illustrated embodi- 
ment, a simpler and faster hashing algorithm is described which has an acceptable degree of pseudo- 
random characteristics. In this context, a pseudo-random algorithmic function will insure that any index 

25 value generated from the account number will have an equal probability of lying anywhere in the bit map. 
Furthermore, the results of the algorithmic function used with one bit map should not correspond in any way 
to the results of the algorithmic function used to generate a different bit map. ^ 
In the illustrated embodiment, these factors are balanced by selecting and combining small groups of 
digits in the account number to create index values. This approach can best be understood by referring to 

30 Figure 3 and the tables below. Figure 3 illustrates the last 12 digits of an account number 0358-2314-2787. 
The position of these digits has been labelled 1 to 12. from right to left. Where the bit map has 200,000 
entries, index values between 0 and 199,999 must be generated. The most significant digit of that six-digit 
index value must be either a one or a zero. The remaining five digits must be between 0 and 9. 

The first index value which will be used to place an indicator in the first bit map in Figure 2, can be 

35 generated using Table I. which is merely intended to illustrate a suitable hashing function. 

TABLE I 



INDEX 


ACCOUNT 


CORRESPONDING 


INDEX 


VALUE 


NUMBER 


ACCOUNT DIGITS 


VALUE 


DIGIT 


POSITIONS 






1 


(4&5) 


(2 + 4) 


0 


2 


(1.7&8) 


(7 + 3 + 2) 


2 


3 


(2, 4 & 9) 


(8 + 2 + 8) 


8 


4 


(2, 5 & 10) 


(8 + 4 + 5) 


7 


5 


(3. 6 & 11) 


(7+1+3) 


1 


6 


(3. 7& 12) 


(7 + 3 + b) 


0 



50 

As seen from Table I above, the first digit is derived based upon whether the sum of two digits in the 
account number is even or odd. In this example, in index digit 1, the two account number digits selected (2, 
4) are in the fourth and fifth position. Since 2 plus 4 is even, the first digit of the index value will be 0. Digit 
2 of index 1 is tiie modulo 10 summation of the account number digits located at positions 1. 7 and 8, 
namely. 7. 3 and 2. The sum of 7 + 3 + 2 equals 12, with the modulo 10 sum being 2. such that digit 2 of the 
index value is 2. Similarly, digit 3 is the modulo 10 sum of 8 + 2 + 8 (positions 2, 4 & 9). which is equal to 8. 
Therefore, the third digit in the index is 8. The remaining digits are calculated in a similar manner to yield 
digits 7. 1 and 0. When read together, the index value for the account number in Figure 3 is 028170. An 

6 
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indicator will then be placed in the first bit nnap at the 28,170th bit. If an indicator is already present at that 
bit from a previous table entry, no change will be made. 

Similar index values are then calculated for each of the bit maps present in the master table. In the 
preferred embodiment with 5 bit maps, another four index values will be generated. A table will be used for 
each index value that is similar in structure, but different in content to the table illustrated above. The index 
digits selected for the tables will preferably be as different from each other as possible. 

A second table (Table II) is set forth below as another illustrative example: 



10 



IS 



20 



TABLE II 



INDEX 


ACCOUNT 


CORRESPONDING 


INDEX 


VALUE 


NUMBER 


ACCOUNT DIGITS 


VALUE 


DIGIT 


POSITIONS 






1 


(2&6) 


(8 + 1) 


1 


2 


(4. 5 & 8) 


(2 + 4 + 2) 


8 


3 


(1, 3&9) 


(7 + 7 + 8) 


2 


4 


(3, 5& 10) 


(7 + 4 + 5) 


6 


5 


(2,7&11) 


(8 + 3 + 3) 


4 


6 


(4.6& 12) 


(2 + 1+0) 


3 



25 



30 



35 



40 



45 



50 



55 



When the account number shown in Figure 3 (0358-2314-2787) is hashed in accordance with the 
algorithm of Table II. an Index value of 182.643 is generated. An indicator would then be placed in the 
182.643rd bit of the associated bit map. 

By generating a master table in this fashion, an indicator will be placed in each bit map for each invalid 
card. When the table is used to detect an invalid account number (a process described in greater detail 
below) an indicator must be present in each bit map tested, otherwise the card is known to be valid. The 
converse of this statement is not true. More specifically, even if an indicator is present in each bit map, the 
card might still be valid. As can be appreciated, as more invalid cards are listed in the table, and more 
indicators are added to the bit map based on the results of random algorithmic functions, the likelihood that 
indicators will be present for the index values obtained by hashing any account number will increase. 

The probability that an unlisted valid account number will be identified as potentially invalid is given by 
the following fornnula: 

(2) P = [1 - (1-1/B)'^r 

where P is equal to the probability. B is equal to the number of bits in each map, N is equal to the number 
of listed account numbers, and M is equal to the number of bit maps. In the arrangement shown herein, 
where five bit maps are used, each 200.000 bits long, if 200,000 account numbers are listed, the probability 
of a valid card being identified as potentially invalid would be on the order of 10.1 percent. If the file is 
reduced to 100,000 account numbers, the probability of identifying a valid card as potentially invalid drops 
to just below one percent. 

The probability of identifying a valid card as potentially invalid can be varied by changing the total 
number of bit maps in the master table. Assuming that the length of the bit map has been adjusted to 
maximize Information content (as discussed above) the probability that a valid account number will be 
identified as potentially invalid Is given by the following equation: 

(3) P = 1/2" 

This equation demonstrates that when five bits maps are used, the probability of identifying a valid card as 
potentially invalid Is 1 In 32 or about 3.1 percent. In the illustrated embodiment, where only 100,000 cards 
are initially listed, the bit maps are not utilized to their full information carrying capacity and the probability 
of identifying a valid card as potentially invalid is just under one percent as noted above. 

From a purely statistical analysis, if 100,000 invalid cards are to be listed in a master table one million 
bits long, seven bit maps should be used. To implement such a master table, a hashing algorithm which will 
randomly distribute information within seven bit maps, each 142,857 bits long, must be created. For 
practical reasons, five bit maps were selected for this illustration since a suitable hashing algorithm could be 
created more readily. Furthermore, while the use of five bit maps instead of seven in the master table will 
result in an increase in the percentage of valid cards that are identified as potentially invalid, this increase is 
relatively small and not considered unacceptable- Finally, the use of five bit maps allows the number of 
listed account numbers to increase to about 140,000 with the probability of identifying a valid card as 
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potentially invalid Increasing to only about 3.25 percent. 

The effect of the subject data compression system can be compared with listing the actual account 
numbers in a memory. For the comparison, the least 12 significant digits of the account number are 
selected. Each 12 digit account number would require 48 bits of memory, assuming four bits per digit in a 

5 binary coded decimal format. In contrast, in the subject system, reasonable operation Is achieved when the 
number of bits in the master table is roughly seven to ten times greater than the number of invalid account 
numbers to be listed. This represents a reduction in memory needs by roughly factor of five and balances 
the competing factors of limited memory and information content. 

In practice, the list of invalid cards used to generate the table can also be trimmed with respect to the 

10 geographical location of the invalid cards in a manner similar to that described in the Berstein patent. 
However, rather than distributing these reduced lists as called for in the Berstein patent, the lists are used 
to generate a plurality of master tables which are then distributed geographically. In this manner, the total 
list of invalid cards, which may exceed one million in the United States alone, can be broken Into regional 
subsets having a length on the order of 100,000 cards each. This master table can be one million bits or 

75 125 K-bytes long. 128K dynamic RAM memories are readily available at relatively low cost and can easily 
store this size master table. More importantly, the reduced size of the master files simplifies and shortens 
the time necessary to transmit the information to the terminals. 

The transmission of the master table to each individual terminal could be done along the same type of 
communication lines used to Interconnect the terminal and the central processor unit for on-line authoriza- 

20 tions. These lines are shown as 50 in Figure 1. In this approach, a communication protocol must be 
established with each terminal to send the information. In the preferred embodiment of the subject 
invention, the master table 40 is broadcast over radio or television waves to the terminal. As shown in 
Figure 1 . the CPU is connected to a transmitter 60. Transmitter 60 generates electromagnetic waves which 
are received by the antenna 72 of receiver 70 provided in each terminal. The information received by the 

25 receiver is downloaded into memory in each terminal. Information on radio waves can be readily transmitted 
at 38.400 bits per second such that the entire one million bit master file could be transmitted in less than 
one-half a minute. This file could be generated and transmitted once a day so that the most current 
Information on invalid cards is available to the terminals. If a television signal is used, the information can be 
inserted in the vertical blanking interval as is well known in the art. 

30 If less frequent transmission of the entire master table is desired, the table can be updated with 
additions. For example. If the master table is transmitted weekly, updates could be transmitted on a daily 
basis. In this case, lists of additional invalid cards could be supplied to each terminal. Each newly 
transmitted invalid account number would be hashed by the individual terminal and indicators would be 
placed into the bit maps of the master table. 

35 If the system is operated in a manner where a significant number of new entries are typically supplied 
to the terminal prior to retransmitting an entirely new master table, steps can be taken to reduce the 
transmission time of the updates. For example, when the table is Initially created, each twelve digit account 
number could be "prehashed" to yield a seven digit number. This seven digit number would then be 
hashed to create index values in a manner similar to that described above. If the master table is created in 

40 this manner, only the seven digit, prehashed account numbers, rather than the full twelve digit numbers, 
would have to be supplied to the transaction terminals when the master table is updated. This approach 
would shorten transmission time by almost one-half. 

It should be noted that while individual account numbers can be added to the master table, individual 
account numbers cannot be deleted. As can be appreciated, any time a file is created by data compression. 

45 there will be duplicates or overlapping entries. Therefore, even If a particular card has regained valid status 
(or the listing period has expired), the indicators could not be safely removed from the file without 

unintentionally destroying other meaningful data. 

Effective deletion of account numbers can only be achieved by transmitting a newly generated master 
file. Transmission of a new master file should occur before the number of account numbers listed in the file, 

so as increased by updates, (or card usage as discussed below) reaches a level where an unacceptable 
percentage of valid cards are being identified potentiaily invalid. 

Other methods of providing Interim file updates are possible. For example, a new master table can be 
created at the central processor utilizing the most current list of invalid cards. The new master table can 
then be compared with the old master table and information about the differences can be distributed. As 

55 noted above, updates of the master table must be limited to adding information about newly listed cards. In 
this case, newly listed cards are represented in the new master table by bits set to logic "one" which had 
previously been set to logic "zero." Updates to the file can be made by transmitting the addresses of any 
bits which have been changed to logic "one." The processor in the terminal can then set the identified bits 



8 



3DOCID- <EP. 



0378349A2J_> 



EP 0 378 349 A2 



to logic "one" in the locally stored version of the master table. 

It is estimated that if the entire file is transmitted weekly with an update transmission every day. the 
total amount of data transmitted can be reduced by over sixty percent. Even so, transmitting the entire file 
on a daily basis is preferred since any newly installed terminal must receive an entire master file, rather 

5 than an update, in order to be brought into service. 

Having described the generation and transmission of the master table to the transaction terminals, the 
use of the master table at the transaction terminal will now be discussed with reference to the flow chart of 
Figure 4. At the time of a purchase, a cardholder will present his transaction card to a merchant. The 
account number of the card is then supplied to the transaction terminal, as shown in step 100 in Rgure 4. 

10 The processor in the transaction terminal can then generate index values for each bit map in a manner 
exactly equivalent to the algorithms used to generate the master table. 

Assuming the hashing system described above has been used to create the master table, the first digit 
of the first index value will be defined by whether the sum of digits in positions 4 and 5 are odd or even. 
The remaining five digits of the first index value will be the modulo sum of each group of three selected 

75 digits. After the first index value is generated (step 102), the processor will look Into the first bit map of the 
master table to determine If an indicator has been placed at the location defined by the index value(step 
104). If there Is no Indicator at that location in the first bit map, the analysis is complete and the transaction 
can be allowed to continue (step 106). 

Step 106 is intended to represent the next set of steps to which the transaction would normally be 

20 subjected. For example, the transaction amount could be compared to a dollar limit stored either on the 
card as risk assessment data or in the terminal. If the transaction falls below that dollar limit it could be 
automatically approved right at the terminal. If the transaction limit is above that amount, the transaction 
information may still be sent on to the central processor for further analysis. 

If an indicator is present in the first bit map. the analysis will continue for each remaining bit map. The 

25 processor will first determine If there are any bit maps remaining that have not been tested (step 107). If 
there are any bit maps remaining, the processor will generate the index value for the next bit map in step 
108. The processor will check to determine if an Indicator has been placed in the next bit map of the master 
table at the location defined by the newly generated index value (step 104). As noted above, if no indicator 
is present at that location, the card is known to be valid and the transaction can proceed, (step 106) 

30 If indicators are present in all of the bit maps, (i.e. there are no more bit maps left to test and therefore 
the answer to decision step 107 is "no") there is a possibility that the card is invalid and the information 
must be routed for further processing as shown in step 110. In this step, an on-line connection can be 
established to the central processor 30. The transaction Information is transmitted to the central processor 
where it can be further analyzed. The analysis can be made at the central processor If the list of all invalid 

35 cards is stored at that location. In the alternative, where the invalid card lists are stored at the issuers 10, 
the transaction can be rerouted for further analysis at the issuer. If the card Is. indeed, invalid, a return 
message can be given to the terminal to decline the transaction. If, however, the card is valid, the 
transaction can be approved. 

As discussed above, the subject system provides a master table with a large amount of information 

40 held in a small space. This approach described herein, however, has an additional advantage. More 
specifically, in order to check any card against the master file, there is no need to go through the entire 
table. In the system described in U.S. Patent No, 3,696,335. where the list of actual account numbers is 
supplied to the terminal, the account number is compared to each of the numbers in the list in order to 
determine if the card is listed. Even if more sophisticated binary searching algorithms are used (where lists 

45 are arranged in numeric order), a number of comparisons are still necessary. In contrast, in the subject 
system, only the location in the bit map corresponding to the index value must be checked to determine if 
an indicator is present. The entire bit map does not have to be reviewed. In a master table having five bit 
maps, a determination can be made as to whether an account number is present in a universe of 100,000 
invalid cards simply by looking at five locations in the master table. If any indicator is missing, the card is 

50 known to be valid. 

In the pilot programs initiated by the assignee for implementing the subject invention, transmission of 
the master table to the remote terminals is performed on a daily basis. This high frequency of distribution 
permits information in the master table to be much more current as compared to the information contained 
In the standard printed bulletins which are distributed on a weekly basis. However, even a daily distribution 
55 will not include ail of the cards known to the issuer as being invalid. For example, many cards are used 
almost immediately after they have been lost or stolen. Thus, even if the cardholder contacts the issuer 
immediately after a card has been lost or stolen, some number of hours will elapse before that information 
is distributed. 
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The omission from the master table of a card known to be invalid is not limited to the situation where 
there has not been sufficient time to distribute the reported information. As noted above, in national 
transaction card systems, invalid transactions cards are listed in the card bulletin based on the geographical 
region where they are most likely to be used. For example, a card reported lost or stolen in New York will 

5 generally not be listed in the bulletins distributed in California. This limitation is imposed to reduce costs 
and make sure the card bulletin (and now the master table) does not become unreasonably long. 
Unfortunately, this limitation also makes the small percentage of invalid cards that are used in an 
unexpected geographical region more difficult to detect. 

In order to reduce the frequency of the undetected fraudulent use of a card known to be invalid, the 

70 subject system can be modified such that the master table at the local terminals is supplemented with the 
account numbers of any card which is used for a transaction. By this arrangement, any subsequent use of 
the card, at the same terminal location, will result in an identification that the card may possibly be invalid. 
As noted above, with reference to Rgure 4, if the card is indicated as possibly invalid it is routed for further 
on-line processing. If the card is listed at the issuer as being invalid, it will be detected during the on-line 

IS authorization procedure and appropriate action can be taken. 

Figure 5 illustrates the implementation of this additional aspect of the subject invention. The steps 
which are similar to Figure 4 have like numbers and will not be discussed. To implement the subject 
invention, the account number is added to the master table by inserting indicators representative of the card 
Into each of the bit maps. As noted above with reference to Figure 4, the terminal processor is already 

20 programmed to determine if indicators are present in each of the bit maps located at addresses determined 
by the index values calculated in step 102. If an indicator is not present (the answer to step 104 Is no) the 
card is presumed valid and the transaction can be continued. In conjunction with the continued processing, 
indicators are added to the master table as shown by the new steps illustrated in Figure 5 and discussed 
immediately below. It should be noted that if the answer to step 104 is yes, an indicator Is already present 

25 at the tested location and would not need to be added to the bit map. As before, if all of the bit maps have 
indrcators (the answer to step 107 is no) then the card is considered listed and must be processed on-line 
as possibly invalid in step 110. 

If an indicator is not present in any of the bit maps, one must be inserted- As set forth in step 112. an 
indicator is added to that bit map location which was just noted as vacant In step 1 04. In step 1 07a, the 

30 processor will determine if there are any bit maps remaining that have not been checked. If not, the 
transaction can continue in step 106. If there are additional bit maps to be checked, the next index value is 
generated in step 108a. The index value generated is used to address the next bit map and determine if an 
indicator is present in step 104a- If so. the processor will go on to check any remaining bit maps. If an 
indicator not present, one is added in step 112. This process will continue until all the bit maps have been 

35 checked and updated. 

It should be noted that steps 104a, 107a and 108a can be performed with the identical subroutines of 
original steps 104, 107 and 108 respectively. Thus, the implementation of this additional inventive aspect, 
where indicators are placed in the calculated bit map locations, requires virtually no additional program- 
ming. When the process is complete, an indicator will be present in each of the bit map locations. 

40 Accordingly, if the card is presented for a subsequent transaction at that terminal, it will be Identified as 
possibly invalid and routed for on-line processing. 

In general, the likelihood that any particular transaction card will be legitimately used more than once at 
a specific terminal within a twenty-four hour period will not be particularly high. However, an invalid card is 
often used for multiple purchases in one location. Such a pattern has been observed in gas station 

45 transactions where this aspect of the subject invention might be particularly suitable. 

Another location which may be suitable includes large retail establishments, having multiple transaction 
. terxpinals^ These terminals are typically, Jinked to a master_computej injhe store. In this conf[guratio_n,.. the 
master table of the subject invention would be stored in one location and linked to the master computer. 
Each of the terminals in the store (or possibly a group of stores in the same general area) are provided with 

so direct access to the master table through the master computer. 

As can be appreciated, it is quite common for a cardholder to make a purchase in one department of a 
store and then go to another department and make a second purchase. The act of making the first purchase 
in one department will cause information about the account number of the card to be entered into the 
master table. In this manner, when the account number is processed during the second purchase in a 

55 different department, it will be identified as possibly invalid and sent on-line for approval by the central 
processor. 

It should be noted that it is within the scope of the subject Invention that the master table be distributed 
to a remote site which acts as a network node for multiple terminals. This arrangement still preserves one of 
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the features of the subject system wherein the need to communicate on-line between the remote stations 
and the central processor Is reduced. 

It should also be noted that this aspect of the subject invention can be implemented with any terminal 
having space to store information about account numbers of cards. Thus, even if a terminal is not equipped 

5 to operate with a data compressed master table.' it may nonetheless store Information representative of an 
account number such that a subsequent use will be identified as requiring on-line processing. Of course, 
when coupled with a terminal having a data compressed master table, the additional storage space 
necessary to add information about extra account numbers Is minimized. 

As can be appreciated, as account numbers are added to the master table, the percentage of valid 

10 cards identified as possibly invalid is increased. This effect is minimized by replacing the entire master 
table when the latest version is received at the terminal. The new master table should include any cards 
reported as invalid since the last update. 

In order to maximize the effectiveness of the subject system, it is desirable to distribute the master 
table on a frequent basis. In order to distribute the file on a daily basis, some form of transmission, such as 

75 broadcasting, must be used. Unfortunately, when transmitting data, errors will occur. 

Many prior art techniques have been developed to detect and correct data transmission errors. These 
techniques can be used to enhance the accuracy of the data transmitted as described herein. However, 
most error detection techniques do not give completely unambiguous information for ail types of transmis- 
sion errors. For example, they may give information as to which data bytes have errors but cannot Identify 

20 which bits within the byte are in error. In such a case, correction may not be possible. 

In the case of the subject invention. If a transmission error has occurred in the master table that is not 
corrected, data might be lost and a transaction card which should be identified as invalid could be approved 
as valid. In order to prevent this result from occurring, the subject invention provides for a unique error 
compensation system (as compared to an error correction system) which alters the received master table in 

25 a manner to reduce the probability that a card which had been listed as being invalid will be treated as 
valid. 

In order to achieve this result, the subject invention provides an approach for detecting errors which 
have occurred during transmission. Of course, any errors which can be unambiguously identified can be 
corrected in accordance with prior art techniques. However, errors that are detected which cannot be 
30 pinpointed will be compensated by placing indicators in the master table at each of the suspect locations. 
Since an indicator in the bit map indicates a possibly invalid card, no information about invalid cards will be 

There are many ways for implementing such an error compensation system. In the prefenred embodi- 
ment of the subject invention, standard error correction techniques are used as a basis for detecting errors. 
3S In oreler to appreciate the preferred embodiment, the data transmission format must first be explained. As 
noted above, in the preferred embodiment, the master table has one million bits of data. This master table 
is logically defined by 5953 blocks of data each having 21 bytes. Each byte has 8 bits of data so that there 
are total of 168 bits of data per block. 

For data transmission purposes, these 168 bits of data are reconfigured into 24 bytes, each byte having 
40 seven bits of data and one parity check bit. Parity check bits are old and well known in the art. Briefly, the 
parity check bit is set such that the total number of "ones" in each byte is an odd number. If after 
transmission, there are an even number of ones in the byte, it can be concluded that there has been a an 
odd number of transmission errors in the byte. The most probable error would be a single bit error. 

In addition to the 24 bytes referred to above, a 25th byte is added to the block prior to transmission. 
45 This block is called the Longitudinal Redundancy Check byte or LRC byte. LRC bytes are also known in the 
art. The LRC is generated by exclusive-or-ing each of the preceeding bytes together. By this an-angement. 
• the total number of "ones" in all similar bit locations in each byte within the block (including the LRC byte) 
is even. The LRC can be used to provide a parity check on the bit positions in each byte In the block (as 
opposed to the byte parity identification provided by the parity bit). After transmission, ail of the bytes, 
so including the LRC byte, are exclusive-or-ed. tf there have been no transmission enrors. the result (called the 
block error byte) should be zero. If any of the bits in the block error byte are one. it is an indication that 
there has been a transmission error in that bit position in one of the bytes. The parity check and the LRC 
byte are used together to detect and correct certain errors and to provide compensation for other errors. 

In the embodiment implemented by the assignee herein, each of transmitted blocks actually include 28 
bytes. The first two bytes are used to hold an address which specifies the location of the block within the 
master table. Another byte is available for a cyclical redundancy check (CRC). The use of cyclical 
redundancy check byte is another error correction technique used in the prior art and need not be 
described herein since it is not used in the subject error compensation scheme. In practice, both the 
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address bytes and the CRC byte are used in the creation of the LRC byte. It is desirable to use an odd 
number of bytes (in this case 27) to create the LRC byte thereby insuring that the LRC byte will have an 
odd parity similar to all of the data bytes. 

- ^ Having described the format of the transmission blocks, the error correction and compensation scheme 
will now be described with reference to Figure 6, In step 202. the block error byte Is generated by 
exclusive-or-ing ail of the transmitted bytes. The block error byte is stored. As noted above, the contents of 
the block error byte should be all zeros if no errors occurred. The presence of any "ones" indicates that an 
error has occurred in that bit position in one of the bytes. The number of errors represented in the block 
error byte (the number of "ones") is stored in an LRC error counter in step 204. 

In Step 206, the parity errors are identified and the location of each byte having a parity error is stored. 
The number of bytes with parity errors is stored in a parity error counter in step 208. As noted above, each 
byte should have an odd parity. If parity is even, the byte has been subject to a transmission error. Steps 
202. 204 and 206, 208 can be performed in a parallel fashion, on a byte by byte basis, as the block is being 
received at the terminal. 

15 If no errors are detected in step 210. the next block can be processed in step 212. If errors are 
detected, then the number in the parity error counter and the number in the LRC error counter are 
compared in step 214. In step 216. a determination is made as to whether the number in the parity error 
counter and the number in the LRC error counter are equal. If they are. another determination is made In 
step 218 as to whether both counters are equal to one. If both counters are equal to one. it is likely that 

20 there is only one error and it is located in the byte with the parity error and in the bit that is shown to be in 
error by the block error byte. This error can be corrected by changing the bit. This type of error correction 
IS well known and can be performed by exclusive-or-ing the identified byte with the block en-or byte as set 
forth in step 220. 

If the number in the parity error counter equals the number in the LRC error counter but they are 
25 greater than one. it is likely that there are single errors in multiple bytes. The block error byte gives 
information as to which bits in the bytes might be in en-or. However, information as to which byte has a 
particular bit error is incomplete. In this case, according to the error compensation scheme of the subject 
invention, each of the identified bits in the identified bytes are changed to 1. This can be accomplished by 
or-ing each of the bytes identified as having a parity error with the block error byte as shown In step 222. 
30 This step results in the placement of an indicator in each of the suspect bits. As can be appreciated, this 
insures that any of the bits which might have been subject to a transmission error now has an Indicator, so 
that no information about invalid cards will be lost. 

If the determination in Step 216 indicates that the number in the parity error counter and the LRC error 
counter are not the same, then there is a determination if the number in the parity error counter Is greater 
35 than the number in the LRC error counter in step 224. If that is the case, it would indicate that multiple 
transmission errors combined to cancel information in the block error byte. The assumption is then made 
that only the parity error information is reliable. Based solely on the parity information, certain bytes can be 
identified as having errors but the locations of these errors within the identified byte is unknown. In this 
case, the compensation remedy is to turn ail of the bits in each of the bad bytes to 1 as shown in step 226. 
40 If the result of Step 224 is that the number in the parity error counter is less than in the LRC error 
counter, then this is an indication that an even number of errors (most probably two) occurred in a byte 
which cancelled the parity check. No clear information is then available as to which bytes have errors. 
Assuming the block error byte is valid, information is available as to bit positions where errors might have 
occurred, even though the byte location is unknown. The ambiguous error is compensated by setting 
45 indicators at the identified bit locations in every byte of the block. This result is achieved by or-ing the block 
error byte with the all of the data bytes as shown in Step 228. After all of the error correction or 

^°'^i^®"^^*'°"^*?P^ h3ve b^^ 

The compensation approach set forth in steps 218, 22 and 224 all function to add indicators to the bit 
map. While this action reduces the possibility that information about invalid cards will be lost, the number of 
50 valid cards identified as invalid will increase. However, as noted above, a certain percentage of valid cards 
identified as possibly invalid and forwarded on-line for authorization is not considered a problem. It has 
been found that the error compensation approach described herein does not raise that percentage above a 
tolerable level. For example, even though step 224 could add a significant number of indicators to the table, 
the type of error addressed by step 224 has a fairly low probability of occurrence such that the increase in 
)5 the percentage of valid cards identified as invalid will not have a significant statistical impact. 

It should also be recognized that certain rare combinations of transmission errors can compensate each 
other and avoid detection entirely. This latter characteristic is common to error correction techniques which 
do not rely on redundancy transmissions to detect errors. Since one object of the subject invention is to 
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reduce the amount of data transmitted, redundant transmissions are not desirable and should be avoided. 
Fortunately, these types of compensating errors are not common enough to warrant the use of error 
detection techniques utilizing redundant transmissions. ^ 



In summary, there has been provided a new and improved system for distributing information about 



s invalid transaction cards. In this system, a master file is created containing less than the entire account 
number of the cards. The master file consists of at least one bit map having indicators corresponding to 
invalid cards. The location of each indicator is determined by hashing the account numbers to produce an 
index value which Is then used as an address for supplying the indicator to the bit map. Once indicators 
have been placed in all the bit maps of the master table for all the Invalid account numbers, ^^hgtnasterj 

10 (HbleliOhe^ transaction terminals which the information in the 

master table to analyze pending transactions, q^e^jinfo rmati on in .the- table is arranged such that jf ^ 
poiSFSiaTiySTnval^ ^vill _be generated Iwhichiwljj jcau be? 

/rgas^Blpnto t^ In the preferred embodiment, the table is arranged 

such that the probability of a valid card being identified as potentially invalid is less than ten percent and 

15 preferably on the order of one to three percent. In this manner, only a small percentage of valid transactions 
will be transmitted to the central processor for further analysis as a result of this scheme. During each 
transaction, the master table can be supplemented with information about the account number of the 
transaction card presented for the purchase. In this manner, any subsequent use of the card will be routed 
for additional processing. A scheme for compensating for data transmission errors is used to reduce the 

20 possibility that information about invalid cards is not lost when the master file is distributed. 

While the subject invention has been described with reference to preferred embodiments, it is apparent 
that other changes and modifications could be made therein by one skilled in the art without varying from 
the scope and spirit of the subject invention as defined by the appended claims. > 



1 . A method for compensating tor transmission errors in a data file wherein said file includes information 
relating to a list of transaction cards and wherein each listed card is represented by at least one indicator 

30 comprising the step of: 

placing an indicator at each location in the data file where a transmission error may have occurred such that 
information about the listed cards will not be lost. 

2. A method of operating a transaction terminal for facilitating the off-line approval of transactions based 
upon the use of transaction cards each having an account number, comprising the steps of:- 

35 receiving information about a list of transaction cards in the form of a master table wherein each listed card 
is represented by at least one indicator; 
detecting transmission errors; and 

compensating for any ambiguous errors by placing an indicator in the table in each of the locations where a 
transmission error may have occurred so that information about listed cards will not be lost. 
40 3. A method as recited in Claim 2 wherein said master table is arranged in blocks of data, each block 

consisting of a plurality of bytes, wherein each byte includes a parity check bit and wherein each block 
further includes a longitudinal redundancy check byte generated by exclusive-or-ing the other bytes in the 
block and further including the steps of: 

exclusive-or-ing all of the bytes in each block to generate a block error byte and recording the number of 
45 errors based on the contents of the block error byte; and 

determining how many and which bytes have a parity error based on the parity check bit. 

4. A method as cited in Claim 3 further including the steps of: 

determining if the number of parity errors in a block equals the number of errors in the associated block 
error byte and if that number is greater than one, and if so, then; 
50 inserting indicators in each byte shown to have a parity error, said indicators being Inserted at bit locations 
shown to have errors based on the contents of said block error byte. 

5. A method as recited in Claim 3 further including the steps of: 

determining if the number of parity errors in a block is greater than the number of errors indicated by the 
associated block error byte, and if so, then; 
66 inserting indicators into all of the bits of any bytes that has a parity error. 

6. A method as recited in Claim 3 or any claim appendant thereto wherein indicators are inserted in all 
of the bytes in the block at the bit locations shown to have errors based on the contents of the block error 
byte. 
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7 A method as recited in any of Claims 3-6 wherein said step of inserting indicators is performed by 
or-ing the block error byte with all of the bytes in the block having a parity error. 

8 A method of operating a transaction terminal according to Claim 2 or any claim appendant thereto 
wherein the master table is defined by a plurality of bit maps and wherein each listed card .s represented 

bv one indicator in each bit map. . • ^ 

9 A method of facilitating off-line approval of transactions in a transaction network which 'ncludes a 
central processor, a plurality of remote transaction temiinals and a plurality of transaction cards, each card 
having an account number associated therewith, said method comprising the steps of: 
generating, at the central processor, a master table containing data derived from a list ofJ^r^^^^- -J-^^^ 
The data being less than the entire account number of each card and wherein each listed card is 
represented by at least one indicator; 

distributing the master table in a manner to be locally accessed by the -remote transaction terminals 
detecting bansmission errors and placing an indicator in locations In the master table which are possibly in 

comp^rl^g the account number of a transaction card being presented for a pending transaction with the 
data in the master table and generating an output signal based on the outcome of that ^^o^^Pf f °"- 

10. A method according to Claim 9 wherein the master table is defined by a plurality of bit maps, each 
listed card being represented by one indicator in each bit map. . ^ , , • , .^^^ 

11 An apparatus for compensating for transmission en-ors in a data file wherein said f'e ."eludes 
information relating to a list of transaction cards and wherein each listed card is represented by at least one 
indicator comprising: 
storage means for tiolding said data file; 
means for detecting transmission errors; and 

meLs for placing an indicator at each k)cation in the data file where a transmission error may have 
occurred such that information about the listed cards will not be lost. 

12. A transaction temiinal for facilitating the off-line approval of transactions based upon the use of 
transaction cards each having an account number, comprising: ,. , , , .,„,^.i„r, r^^rn^ in 

storage means for holding a transmitted data file containing information about a list of ransaction cards in 
the form of a master table wherein each listed card is represented by at least one indicator: and _ 
orocessor means, said processor means for detecting transmission errors, said processor means also for 
cS^SnsaCfor any ambiguous errors by placing an indicator in the table in each of the locations where a 
transmission error may have occurred so that information about listed cards will not be lost 

13 An apparatus as recited in Claim 12 wherein said master table .s arranged in b ocks of data^ each 
block consisting of a plurality of bytes, and wherein each byte includes a parity ^''^^^IXT^r ^^es 
block further includes a longitudinal redundancy check byte generated by f ^ "f '^^J-^^, f ^^^^^^^^^ 
in the block and wherein said processor further functions to exclusive-or all of the ^^V^^^^" ^^^^f *° 
generate a block error byte and thereafter recording the number of errars ''^^ ^^^a^^^BS ^Le l 
block error byte, said processor means further functioning to determine how many and which bytes have a 
oaritv error based on the parity check bit. ^ ^ . 

14 A temiinal as recited in Claim 13 wherein the processor means functions to determine if the numbe 
of parity errors in a block equals the number of errors in the associated block error byte and if """^ber 
S Greater than one. and if so. then inserting indicators in each byte shown to have a Panty error, said 
IndSors Sg inserted at bit locations shown to have errors based on the contents of said block error 

"^^^S A terminal as recited in Claim 13 wherein the processor means functions to determine if the number 
of parity errors in a block is greater than the number of errors indicated by the associated block error byte, 
and if so. then inserting indicators into all of the bits of any bytes that has a parity error. 
- - -16.-A terminal -as re-cited in Claim 14 or Claim 15 wherein said^^^^^^^ 

if the number of parity errors in a block is less than the number of errors indicated by the associated block 
so errer SytT and if so then it inserts indicators in all of the bytes in the block at the bit locations shown to 
have errors based on the contents of the block error byte. ^ . ^. ^ :„»«»rtaH 

1? A terminal as recited in Claim 15 or any claim appendant thereto wherein the indicators are inserted 
by the proLssor means by or-ing the block error byte with all of the bytes in the block having a parity 

18 A transaction terminal according to Claim 12 or any claim appendant thereto wherein the stored 
master table is defined by a plurality of bit maps and wherein each listed card is represented by one 

'"''T^'tS.i^ll^'nLor, including a central processor, a plurality of remote transaction terminals and a 

14 
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plurality of transaction cards, each card having an account number associated therewith, the system 
facilitating off-line approval of transactions, comprising: 

means at the central processor for creating a master table containing data derived from a list of transaction 
cards, the data being less than the entire account number of each card and wherein each listed card is 
5 represented by at least one indicator: 

means for distributing the master table in a manner to be locally accessed by the remote transaction ^ 
terminals; 

means at each terminal for receiving data representative of the account number of a transaction card 
presented for transaction; and 

70 processor means operatively associated with the remote terminals for detecting transmission errors and 
placing an indicator in locations in the master table which are possibly in error, the processor means also 
comparing the account number of a transaction card being presented for a pending transaction with the 
data in the master table and generating an output signal based on the outcome of that comparison. 

20. A transaction network according to Claim 19 wherein the master table being stored at the central 

75 processor is defined by a plurality of bit maps and each listed card is represented by one indicator in each 
bit map. 
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@ An improved system Is disclosed for detecting 
Invalid transaction cards at remote transaction termi- 
nals. The system includes providing each terminal 
with a master table having data corresponding to 
invalid cards. The data in the master table is less 
than the actual account numbers of the Invalid cards. 
By using a compressed version of the data, the file 
can be shortened to facilitate storage and transmis- 
sion. The compressed data file is arranged such that 
when an invalid card is presented, it will be identified 
and routed on for further processing. In the preferred 
embodiment, the probability that a valid card will be 



identified as potentially Invalid is on the order of one 
to three percent. During each transaction, the master 
table Is supplemented with information about the 
account number of the transaction card presented 
for the purchase. In this manner, any subsequent 
use of the card will be routed for additional process- 
ing. A scheme for compensating for data transmis- 
sion errors is used to reduce the possibility that 
information about invalid cards is not lost when the 
master file is distributed 
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